General

  • Target

    NEAS.1243ee301154773ba22c79c79a3e6640.exe

  • Size

    1.1MB

  • MD5

    1243ee301154773ba22c79c79a3e6640

  • SHA1

    50e7bb443eba7fed4a5b0e3d7d4019f9edfd52ba

  • SHA256

    a17a8a1b9a984221bf41b6c05e7a369797b8a5c4cf249beabc9c5efc14cc1183

  • SHA512

    aaa200570c5d2fd3593a8c3853d0bd8a0e0cdbe70f36797d2877d01c94cab3ff123c16555a6744511e77bc785ec94ecbea046dee2ca32a21073b0bc7af02d7cd

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mILdsOlzC3tP2AEqyrEG:ROdWCCi7/raWMmMCMwc

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.1243ee301154773ba22c79c79a3e6640.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections